Privileged
identity management systems are an important part of providing
security for the data and confidential information belonging to almost any
business – but what happens when those systems fail?
A number of experts in the privileged identity management field have
heard many stories from companies about privileged identity management systems
that failed to protect them from threats to their computer networks or which
otherwise turned out to be not the value for money which they were expecting,
and some such stories have even made headlines on software news sites.
In most cases the truth of the matter is that the problem lies with the
business itself. Many businesses which implement privileged management systems
still fail to realize just how essential they really are, and tend to end up
delegating their implementation to a fight of vendor check boxes or a rubber
stamp RFP. The truth is there is no good reason at all why a privileged
identity management system should not, if it has been implemented in the
correct manner, provide all the security that a company will need for its
computer networks, as well as lowering the cost of complying with regulations
and helping to make company employees more accountable for any actions they
take which affect either data security in particular or the business’ IT
service in general.
Unfortunately, there are too many instances when a company has failed to
make the right choices when it comes to the implementation of a privileged
management system, the end result of which is a lot of expense for very little
in the way of reward.
In order to prevent this, companies need to know a few basic facts about
privileged identity management systems. For one thing, such a system should not
be bought based solely on up front fees and check boxes, regardless of what
claims the seller may be making. This is for the simple reason that not all
systems will work in the same way in different environments. Privileged
management systems need to be specifically tailored to a company in order to
maximize their effectiveness and be inclusive of possible differences such as
the number and type of computers it will need to be managing (such as Windows,
UNIX, Linux and other hardware), the individual complex organizational
structures of each individual company and various other factors.
Privileged management systems almost never come in a “one size fits all”
variety. |